Static task
static1
Behavioral task
behavioral1
Sample
cecf979f70b81cfa3fc2caa3c7ad5d73_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cecf979f70b81cfa3fc2caa3c7ad5d73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cecf979f70b81cfa3fc2caa3c7ad5d73_JaffaCakes118
-
Size
24KB
-
MD5
cecf979f70b81cfa3fc2caa3c7ad5d73
-
SHA1
5986456352d03b3ee8370079fe156715e5608826
-
SHA256
f372ccae95b4573cf184f5b926794abf23b72a7a201d4931361b3d302afaf441
-
SHA512
d589739490be7eee33757e0ecd2934d9290141afcf68841b3f23967d72abcc3897a03e4a20016b52fa8079d1cc1ef92976a5e99ba4cdf10985dbd890e05dd5c7
-
SSDEEP
384:Hi12vDhSZxCtZ2XBrXRQSJl3tNy4CGA1NsPushyYYN7RMXEzPmk0V:C129i8IhXFtN/lA/AyYYNlMOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cecf979f70b81cfa3fc2caa3c7ad5d73_JaffaCakes118
Files
-
cecf979f70b81cfa3fc2caa3c7ad5d73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�<[0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�<[1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�<[2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE